Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/2fRd1ZvQEYU7R2mXnMBhZrE_sxk.roa
File: 2fRd1ZvQEYU7R2mXnMBhZrE_sxk.roa (raw, json)
Hash identifier: ebA+/XGl0BpifUeldU0igLxbkUuW3jkm08P4f+/w6x8=
Subject key identifier: D9:F4:5D:D5:9B:D0:11:85:3B:47:69:97:9C:C0:61:66:B1:3F:B3:19
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 78EA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2fRd1ZvQEYU7R2mXnMBhZrE_sxk.roa
Signing time: Sat 19 Jul 2025 18:42:14 +0000
ROA not before: Sat 19 Jul 2025 18:42:14 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30954 (0x78ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 19 18:42:14 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D9F45DD59BD011853B4769979CC06166B13FB319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:09:dd:bd:d4:34:93:34:c8:bd:0d:d6:91:07:
df:01:b2:95:33:7a:ae:93:68:bd:b3:1e:81:5e:76:
c5:8f:21:ad:26:6f:d8:f7:f1:b7:b9:61:20:67:cf:
7f:ad:ce:17:c1:f8:37:e4:b1:41:51:fd:91:7b:2f:
d3:c6:09:78:11:53:a9:4c:b5:5b:e7:0a:42:60:3c:
d1:ab:25:e9:db:0e:61:4a:27:18:5c:24:a4:a3:a0:
4e:1f:d2:de:ac:fa:88:be:0c:09:da:9c:88:26:70:
1d:c3:a7:00:55:64:ec:c5:cf:b2:a9:e8:9f:33:46:
c9:55:31:57:e6:0f:2c:92:43:cf:23:74:69:0e:3f:
36:ca:88:a0:cc:d3:50:03:98:98:05:b5:60:34:85:
55:5c:24:dd:03:09:35:c5:00:f3:2b:cd:d4:83:00:
cf:17:4b:a8:aa:0d:a6:1b:7a:42:68:ea:9a:05:68:
cc:55:fc:63:01:50:e6:bc:9b:ac:44:9f:15:8b:49:
04:b9:95:3e:72:ef:dc:d8:d6:7e:f3:5d:80:36:2c:
2c:67:c1:57:51:8a:77:3b:86:56:7c:5e:b8:77:56:
57:e6:3f:4a:c0:68:a5:b4:b4:5e:c3:65:bc:8e:5d:
aa:1d:a0:04:c4:92:f0:b6:f4:7f:76:b1:d2:86:c5:
34:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F4:5D:D5:9B:D0:11:85:3B:47:69:97:9C:C0:61:66:B1:3F:B3:19
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2fRd1ZvQEYU7R2mXnMBhZrE_sxk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
41:1a:7b:64:70:fb:93:ab:c7:6f:62:94:1f:2b:b9:9d:90:80:
c1:eb:10:d0:15:2c:f0:49:bd:62:b9:f2:63:f3:60:a7:dc:69:
c1:d0:f2:33:cc:07:8f:2f:0c:3f:7f:21:d6:a8:56:2a:23:94:
dd:36:54:b9:ce:54:60:5e:b9:dd:90:16:a2:97:13:42:c7:b5:
40:61:a2:ca:e3:73:4f:9b:4a:19:d2:7b:0b:ff:6f:6f:29:38:
c4:ee:01:d7:38:f9:de:fe:84:99:74:7d:27:20:ef:1b:78:08:
12:63:d7:02:49:0e:5b:fe:9b:cd:65:1c:ec:40:1a:94:20:6c:
11:10:4e:7d:ae:1c:b5:95:de:35:b9:d3:a5:43:c9:60:c5:48:
f4:7a:a4:aa:b0:00:7b:ff:d8:43:65:74:bf:3a:29:45:46:1a:
b5:ec:f4:be:db:d8:ed:aa:e7:e5:89:c4:3a:dc:e6:ba:a0:a1:
64:12:5d:f8:9a:b1:8f:46:df:53:d0:a4:b5:7c:e4:b5:80:17:
d8:fa:08:f1:9a:99:ae:18:06:75:1f:44:a8:6c:f2:83:16:9f:
02:f0:9d:b9:36:b4:ef:96:3c:f9:f1:1c:8e:c2:a8:55:ce:fd:
0e:f9:3c:c3:f0:6d:83:5b:5d:9d:b9:cd:b5:4d:bf:33:3a:2c:
af:7f:5b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:57:48 2025 by rpki-client